mcpbeat

What this client asked www.pathwren.workers.dev for, when, and what it got. Every number below is from this host's own server-side request log, 2026-09-01 01:43:38Z to 2026-09-01 06:12:16Z UTC.

mcpbeat/0.1 (+https://mcpbeat.com/bot/; liveness check)
mcpbeat/0.1 (+https://mcpbeat.com/bot/; metadata check)
mcpbeat/0.1 (+https://mcpbeat.com/bot/)

22 request(s) from 1 distinct address(es), 4 distinct path(s), first seen 2026-09-01 01:43:38Z, last seen 2026-09-01 06:12:16Z UTC. 1 separate visit(s), counting a gap of more than 30 minutes as a new one.

It describes itself, inside its own user-agent, as liveness check. That is the client's own words, quoted; this page makes no claim about what it is for.

The user-agent strings, exactly as they arrived

user-agentrequestsaddressesfirst seenlast seen
mcpbeat/0.1 (+https://mcpbeat.com/bot/; liveness check)1912026-09-01 01:43:38Z2026-09-01 06:12:16Z
mcpbeat/0.1 (+https://mcpbeat.com/bot/; metadata check)212026-09-01 02:06:23Z2026-09-01 02:06:23Z
mcpbeat/0.1 (+https://mcpbeat.com/bot/)112026-09-01 03:44:30Z2026-09-01 03:44:30Z

What it asked for, in the order it asked

First request to each path, oldest first.

#pathat (UTC)status
1/c/mcp-registry-official/mcp2026-09-01 01:43:38Z200
2/.well-known/oauth-protected-resource2026-09-01 02:06:23Z404
3/.well-known/oauth-authorization-server2026-09-01 02:06:23Z404
4/favicon.ico2026-09-01 03:44:30Z200

Everything it asked for

pathrequestsstatus codesfirstlast
/c/mcp-registry-official/mcp19200×14, 202×52026-09-01 01:43:38Z2026-09-01 06:12:16Z
/.well-known/oauth-authorization-server1404×12026-09-01 02:06:23Z2026-09-01 02:06:23Z
/.well-known/oauth-protected-resource1404×12026-09-01 02:06:23Z2026-09-01 02:06:23Z
/favicon.ico1200×12026-09-01 03:44:30Z2026-09-01 03:44:30Z

What it asked for that did not exist

path it asked forwhat it gotfirst askedsince then
/.well-known/oauth-protected-resource404×12026-09-01 02:06:23Zstill absent — on purpose: one of the discovery documents /mcp/doctor checks; the reason this host does not serve it is written there
/.well-known/oauth-authorization-server404×12026-09-01 02:06:23Zstill absent — on purpose: one of the discovery documents /mcp/doctor checks; the reason this host does not serve it is written there

What it got, and what it sent

Status codes
200×15, 202×5, 404×2
Accept headers
application/json, text/event-stream, image/*
Bytes served
40738
Attributed to a channel
mcp-registry-official (19)
Our instrument classed it
agent×22 — that is our classifier's label from the user-agent, not the operator's, and it has been wrong before.

How to verify it is really them

not observed — no address list and no reverse-DNS convention is published at any URL we could read.

Checked 2026-09-01 against https://mcpbeat.com/bot/ (403 to us).

What it publishes about you afterwards

Not observed. We have not seen this client publish a grade, a listing or a record about this host anywhere, and we make no claim that it does or does not.

Its own documentation

It names https://mcpbeat.com/bot/ in its own user-agent. That is the operator's own claim about itself; we neither endorse nor verify what is on it.

The user-agent names +https://mcpbeat.com/bot/, which is the documented way to find out what this validator wants. That page answered HTTP 403 behind a Cloudflare JavaScript challenge when we fetched it, so its published specification could not be read.

Checked 2026-09-01 against https://mcpbeat.com/bot/ (403 to us).

This page as data

curl -s https://www.pathwren.workers.dev/bot/mcpbeat.json
curl -s https://www.pathwren.workers.dev/data/observed-clients.json   # every client, one request

JSON · markdown · all clients seen here · index as JSON

Method, and what this page will not say

Rows come from a server-side log written before anything is served, so clients that run no JavaScript are counted exactly like browsers. The window is the whole life of the log, 2026-09-01 01:43:38Z to 2026-09-01 06:12:16Z UTC, and it is stated on every number because a count without a window is not a fact. Addresses are stored as salted hashes and counted, never printed. Our own checks send X-Self: 1 and are excluded, together with every request the analyst flagged as one of our own agents reaching for a URL through a model provider's fetch tool (the numbers are on the index). Nothing here is a claim about intent: where this page does not know something it says not observed.